summaryrefslogtreecommitdiff
path: root/ansible/roles/firewalled
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2016-04-25 17:11:50 +0300
committerLars Wirzenius <liw@liw.fi>2016-04-25 17:11:50 +0300
commitc8c0538d36a3f9056c7fd5bfd2135b1bae4a707f (patch)
tree88138d6ce9981cf014516d20da4a8a80740ddc7f /ansible/roles/firewalled
parent5c994ab9bf8290cbe1104c9686250b0816aa8bd5 (diff)
downloadansibleness-c8c0538d36a3f9056c7fd5bfd2135b1bae4a707f.tar.gz
Allow all traffic from libvirt guests through firewall
Diffstat (limited to 'ansible/roles/firewalled')
-rw-r--r--ansible/roles/firewalled/tasks/main.yml10
1 files changed, 8 insertions, 2 deletions
diff --git a/ansible/roles/firewalled/tasks/main.yml b/ansible/roles/firewalled/tasks/main.yml
index 857e524..a1f39a0 100644
--- a/ansible/roles/firewalled/tasks/main.yml
+++ b/ansible/roles/firewalled/tasks/main.yml
@@ -1,5 +1,11 @@
- name: install ufw
apt: name=ufw state=present
-- name: enable ufw
- ufw: state=enabled \ No newline at end of file
+- name: enable all traffic from libvirt VMs
+ ufw:
+ direction: in
+ interface: virbr0
+ rule: allow
+
+- name: enable ufw
+ ufw: state=enabled